Application No.: 10/506,505 

AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims: 

1 . (Previously Presented) A data storage device performing input/output of classified 
data in accordance with predetermined input/output procedures for protection of said classified 
data, and storing said classified data, comprising: 

an interface portion externally exchanging data; 

a first storage portion storing said classified data; and 

a second storage portion storing log information related to the input/output of said 
classified data according to said predetermined input/output procedures and an address 
representing a storage position of said classified data to be input/output in said first storage 
portion. 

2. (Previously Presented) The data storage device according to claim 1, further 
comprising: 

a control portion controlling the input/output of said classified data, wherein 
said log information includes: 

an identification code identifying said classified data to be input/output, and 

a first status information representing a state of storage of said classified data to be 

input/output in said first storage portion; and 

said control portion operates in accordance with said predetermined input/output 

procedures to receive said identification code and said address of said classified data to be 
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input/output via said interface portion, and to store said identification code and said address in 
said second storage portion, and operates in response to a request externally applied via said 
interface portion to determine the state of storage of said classified data in said first storage 
portion based on said identification code and said address stored in said second storage portion, 
and to renew said first status information based on said state of storage. 

3. (Previously Presented) The data storage device according to claim 2, wherein 
said log information further includes a second status information recording a status of 

progression of said predetermined input/output procedures relating to the input/output of said 
classified data to be input/output, and 

said control portion renews said second status information in accordance with the 
progression of said predetermined input/output procedures. 

4. (Previously Presented) The data storage device according to claim 2, wherein 
said log information further includes procedure specifying information specifying said 

predetermined input/output procedures, and 

said control portion renews said procedure specifying information in response to every 
new obtaining of said procedure specifying information. 

5. (Currently Amended) The data storage device according to claim 4, further 
comprising: 

a cyph e r cipher communication portion operating in accordance with said predetermined 
input/output procedures to establish a cyph e r cipher communication path to a supplier or a 
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receiver of said classified data via said interface portion, and to receive or transmit said classified 
data via said established cyph e r cipher communication path, wherein 

in an input procedure included in said predetermined input/output procedures for 
receiving and storing said classified data, 

said cyph e r cipher communication portion receives said classified data in accordance 
with said input procedure, and 

said control portion receives said address via said interface portion, stores said received 
address in said second storage portion, and stores said classified data received by said cyph e r 
cipher communication portion in a storage position on said first storage portion specified by said 
received address. 

6, (Currently Amended) The data storage device according to claim 5, wherein 
in said input procedure, 

said cyph e r cipher communication portion produces a first session key, and 

said control portion renews said procedure specifying information with said first session 

key in response to every production of said first session key by said cyph e r cipher 

communication portion. 

7. (Currently Amended) The data storage device according to claim 5, further 
comprising: 

a signing portion producing a signed log information prepared by affixing an electronic 
signature to said log information or a part of said log information, wherein 

in a re-input procedure included in said predetermined input/output procedures for 



5 



Application No.: 10/506,505 

resuming said input procedure when said input procedure is interrupted, 

said control portion renews said first status information included in said log information 

stored in said second storage portion, obtains said log information from said second storage 

portion and applies said log information to said signing portion, 

said signing portion receives said log information including said renewed first status 

information to produce said signed log information, and 

said cyph e r cipher communication portion transmits said signed log information 

produced by said signing portion via said established cyph e r cipher communication path in 

accordance with said re-input procedure. 

8. (Currently Amended) The data storage device according to claim 5, wherein 
in an output procedure included in said predetermined input/output procedures for 

externally outputting said classified data stored in said first storage portion, 

said control portion receives said address via said interface portion, stores said received 

address in said second storage portion, obtains said classified data from the storage position on 

said first storage portion specified by said received address, and applies said classified data to 

said cypher cipher communication portion, and 

said cyph e r cipher communication portion transmits said classified data received from 

said control portion in accordance with said output procedure. 

9. (Currently Amended) The data storage device according to claim 8, wherein 
in said output procedure, 

said cyph e r cipher communication portion receives an externally produced second 
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session key, and 

said control portion renews said procedure specifying information with said received 
second session key in response to every reception of said second session key by said cyph e r 
cipher communication portion. 

10. (Currently Amended) The data storage device according to claim 8, further 
comprising: 

a log certifying portion verifying and certifying externally applied signed log 
information, wherein 

in a re-output procedure included in said predetermined input/output procedures for 
resuming said output procedure when said output procedure is interrupted, 

said cyph e r cipher communication portion receives and applies said signed log 
information to said log certifying portion in accordance with said re-output procedure, 

said log certifying portion verifies said signed log information received from said cyph e r 
cipher communication portion, and 

said control portion determines whether said output procedure is interrupted or not, based 
on said log information stored in said second storage portion and said received signed log 
information when said received signed log information is certified; determines whether the 
storage position on said first storage. portion specified by said address stored in said second 
storage portion can be restored to the storage state before interruption of said output procedure or 
not, when it is determined that said output procedure is interrupted; restores said storage position 
to the storage state attained before interruption of said output procedure, and resumes said 
interrupted output procedure, when it is determined that the restoring is possible. 
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1 1 . (Previously Presented) The data storage device according to claim 2, wherein 
said classified data includes said identification code peculiar to said classified data, and 
said control portion determines the storage state of said classified data in said first storage 

portion by specifying said classified data in accordance with said identification code included in 
said classified data stored in the storage position on said first storage portion specified by said 
address. 

12. (Previously Presented) The data storage device according to claim 11, wherein 
in an input procedure included in said predetermined input/output procedures for 

receiving said classified data via said interface portion and storing said classified data in said 
first storage portion, 

said control portion interrupts said input procedure without storing said classified data in 
said first storage portion when mismatch occurs between the identification code included in said 
received classified data and the identification code included in said log information. 

13. (Previously Presented) The data storage device according to claim 1 1, wherein 
in an output procedure included in said predetermined input/output procedures for 

outputting said classified data stored in said first storage portion via said interface portion, 

said control portion interrupts said output procedure without outputting said classified 
data when the identification code included in said classified data stored in the storage position on 
said first storage portion specified by said address does not match with the identification code 
included in said log information. 
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14. (Previously Presented) The data storage device according to claim 2, further 
comprising: 

a signing portion producing signed data for said log information, and producing signed 
log information by affixing said produced signed data to said log information, wherein 

in a re-input procedure performed for resuming an input procedure for receiving said 
classified data via said interface portion and storing said classified data in said first storage 
portion, when said input procedure is interrupted, 

said control portion outputs said signed log information produced by said signing portion 
via said interface portion. 

1 5. (Previously Presented) The data storage device according to claim 14, further 
comprising: 

a log certifying portion verifying and certifying an additional signed log information 
prepared by affixing a signed data for an additional log information of said receiver to said 
additional log information, and received from said receiver of said classified data via said 
interface portion, wherein 

in a re-output procedure performed for resuming an output procedure for outputting said 
classified data stored in said first storage portion via said interface portion, when said output 
procedure is interrupted, 

said log certifying portion verifies correctness of said additional signed log information 
received from the receiver of said classified data in said interrupted output procedure, and 

said control portion interrupts said re-output procedure, when said additional signed log 
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information is not certified, or when said additional signed log information is certified and it is 
determined based on said additional signed log information and said log information stored in 
said second storage portion that said output procedure is not interrupted. 

16. (Previously Presented) The data storage device according to claim 1, wherein 
said classified data is a decryption key for decrypting and using encrypted content data, 

and 

said data storage device further comprises a third storage portion storing said encrypted 
content data. 
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